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Claim Amendments (Listing); 


1-46. (Cancelled) 


47. (Currently amended) A method for managing authentication and authorization of 
user access to data applications of a service provider through a wireless communication network, 
comprising steps of: 

authenticating a mobile station of a data application user as a valid mobile station for 
obtaining communication service through the wireless communication network, at a control node 
of the wireless communication network; 

obtaining from the control node information indicating successful authentication of the 
user's mobile station; 

receiving an identifier associated with the data application user, when the user attempts to 
access a data application on a server through the wireless communication network; 

based on the identifier, checking the information to determine [[if]] whether or not there 
has been a successful authentication of the user's mobile station at the control node of the 
wireless communication network; 

if th e in response to a determination [[is]] that there has been a successful authentication 
of the user's mobile station at the control node of the wireless communication network, using the 
identifier to determine [[if]] whether or not the user is authorized to access the data application 
on the server, fi-om among a plurality of data applications accessible through the wireless 
communication network; and 
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[[if]] in response to a determination that the user is authorized to access the data 
application on the server, allowing the user to access the data application on the server from the 
mobile station via communications through the wireless commtmication network. 

48. (Previously presented) The method of claim 47, wherein the steps of 
authenticating, determining authorization of the user and allowing the user to access the data 
application on the server do not require user input of a password. 

49. (Currently amended) The method of claim 47, wherein: 

the control node is a home location register (HLR) of the wireless communication 
network; and 

the steps of obtaining information indicating successful authentication of the user's 
mobile station, receiving the identifier associated with the data application user and checking the 
information to determine [[if]] whether or not there has been a successful authentication are 
performed in an Authentication, Authorization, and Accounting (AAA) server of the wireless 
commimication network. 

50. (Previously presented) The method of claim 49, wherein the step of obtaining 
information indicating successfiil authentication of the user's mobile station from the control 
node comprises: 

periodically querying the HLR for information as to mobile stations that have been 

authenticated; and 

storing identifications of HLR authenticated mobile stations in the AAA server. 
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51. (Previously presented) The method of claim 49, wherein the step of obtaining 
information indicating successful authentication of the user's mobile station from the control 
node comprises querying the HLR regarding the user's mobile station upon receiving the 
identifier associated with the data application user, when the user attempts to access the data 
application on the server through the wireless communication network. 

52. (Previously presented) The method of claim 47, wherein the data application on 
the server offers a service for mobile station users from an operator of the wireless 
commimication network. 

53. (Currently amended) The method of claim 52, wherein the determination [[if]] 
whether or not the user is authorized to access the data application on the server comprises 
determining one of a plurality of available levels of service to which the user is subscribed and 
whether access to the data application on the server is within the one subscribed level of service. 

54. (Currently amended) The method of claim 47, wherein the determination [[if]] 

whether or not the user is authorized to access the data application on the server comprises 
determining one of a plurality of available levels of service to which the user is subscribed and 
whether access to the data application on the server is within the one subscribed level of service. 
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55. (Previously presented) The method of claim 47, ftirther comprising receiving and 
validating a password of the user before allowing the user to access the data application on the 
server from the mobile station via communications through the wireless communication network. 

56. (Currently amended) The method of claim 55, wherein the password of the user 
is the same password that would be validated before granting access to the application on the 
server if the user att e mpted access via a network other than the wireless communication network. 

57. (Currently amended) A system, comprising: 

a wireless network for providing mobile commimication services to and from a plurality 
of mobile stations; 

a control node for authenticating one of the mobile stations of a data application user as a 
valid mobile station for obtaining communication service through the wireless network; 

a data application server, coupled to the wireless network for providing a data application 
service via the network; and 

an authentication and authorization server, wherein the authentication and authorization 
server is configured for: 

(a) obtaining from the control node information indicating successftil 
authentication of the data application user's mobile station; 

(b) receiving an identifier associated with the data application user from the data 
application server, when the user attempts to access the data application service on the 
data application server through the wireless commimication network; 
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(c) based on the identifier, checking the information to determine [[if]] whether 
or not there has been a successfiil authentication of the user's mobile station at the control 
node of the wireless communication network; 

(d) if the in response to determination [[is]] that there has been a successful 
authentication of the user's mobile station at the control node of the wireless 
commimication network, using the identifier to determine [[if]] whether or not the user is 
authorized to access the data application on the server, from among a plurality of data 
applications accessible through the wireless communication network; and 

(e) [[if]] in response to a determination that the user is authorized to access the 
data application on the server, enabling the data application server to permit the user to 
access the data application service from the mobile station via communications through 
the wireless commimication network. 


58. (Previously presented) The system of claim 57, wherein: 
the control node comprises a home location register (HLR); and 

the authentication and authorization server comprises an Authentication, Authorization, 
and Accounting (AAA) server. 


59. (Previously presented) The system of claim 57, wherein: 

the data application server is operated by a wireless carrier that operates the wireless 
network; and 

the data application service is a data service offered by the carrier for mobile station 

users. 
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60. (Previously presented) The system of claim 57, wherein the data application 
server is operated by a party other than a wireless carrier that operates the wireless network. 

61. (Previously presented) The system of claim 57, wherein the data application 
server is also accessible via a communication network other than the wireless communication 
network. 
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